m4278.contaboserver.net - - [18/Jun/2025:07:18:50 -0600] "GET /wp-content/ HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m4278.contaboserver.net - - [18/Jun/2025:07:18:49 -0600] "GET /wp-admin/ HTTP/1.1" 301 251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m4278.contaboserver.net - - [18/Jun/2025:07:18:46 -0600] "GET /wp-content/plugins/ HTTP/1.1" 301 261 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m4278.contaboserver.net - - [18/Jun/2025:07:18:44 -0600] "GET /.well-knownold/ HTTP/1.1" 301 257 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m4278.contaboserver.net - - [18/Jun/2025:07:18:42 -0600] "GET /wp-includes/ HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m4278.contaboserver.net - - [18/Jun/2025:07:18:41 -0600] "GET /public/ HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m4278.contaboserver.net - - [18/Jun/2025:07:18:38 -0600] "GET /tmp/ HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m4278.contaboserver.net - - [18/Jun/2025:07:18:37 -0600] "GET /.well-known/ HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m4278.contaboserver.net - - [18/Jun/2025:07:18:34 -0600] "GET /assets/ HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m4278.contaboserver.net - - [18/Jun/2025:07:18:32 -0600] "GET /images/ HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m4278.contaboserver.net - - [18/Jun/2025:07:18:29 -0600] "GET /wp-content/uploads/ HTTP/1.1" 301 261 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /administrators.zip HTTP/1.1" 301 256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /ini.zip HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /bak.zip HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /content.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /resources.zip HTTP/1.1" 301 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /json.zip HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /clients.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /automation.zip HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /configuration.zip HTTP/1.1" 301 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /prototype.zip HTTP/1.1" 301 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /settings.zip HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /assets.zip HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /rest.zip HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /wp-backup.zip HTTP/1.1" 301 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /test.zip HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /cassandra.zip HTTP/1.1" 301 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /process.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /downloads.zip HTTP/1.1" 301 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /rpc.zip HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /documents.zip HTTP/1.1" 301 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /wordpress-backup.zip HTTP/1.1" 301 258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /mysql.zip HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /graphql.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /directadmin.zip HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /wordpress-config.zip HTTP/1.1" 301 258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /dbase.zip HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /elasticsearch.zip HTTP/1.1" 301 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /traces.zip HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /backup_3.zip HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /rails.zip HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /plesk.zip HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /neo4j.zip HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /wordpress-20240527.zip HTTP/1.1" 301 260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /administration.zip HTTP/1.1" 301 256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /apis.zip HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /service.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /dev.zip HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /postgres.zip HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /toml.zip HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /experimental.zip HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /configs.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /manager.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /backup_4.zip HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /postgresql.zip HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /mongodb.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /snapshot.zip HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /files.zip HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /audio.zip HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /wordpress-full.zip HTTP/1.1" 301 256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /conf.zip HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /staging.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /duplicate.zip HTTP/1.1" 301 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /videos.zip HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /admin.zip HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /client.zip HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /old.zip HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /webservice.zip HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /v3.zip HTTP/1.1" 301 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /dbdump.zip HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /yaml.zip HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /phpmyadmin.zip HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /backup_2.zip HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /dbadmin.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /clone.zip HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /temporary.zip HTTP/1.1" 301 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /composer.zip HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /portal.zip HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /bower_components.zip HTTP/1.1" 301 258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /testing.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /alerts.zip HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /backup_daily.zip HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /photos.zip HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:41 -0600] "GET /applications.zip HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /app.zip HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /release-candidate.zip HTTP/1.1" 301 259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /archive.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /www.zip HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /backup_weekly.zip HTTP/1.1" 301 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /images.zip HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /mssql.zip HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /backup_1.zip HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /site.zip HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /backup_5.zip HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /sites.zip HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /tmp.zip HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /wwwroot.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /sqlserver.zip HTTP/1.1" 301 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /wp-site.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /backup_monthly.zip HTTP/1.1" 301 256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /wordpress-complete.zip HTTP/1.1" 301 260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /services.zip HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /wp-files.zip HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET
m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /temp.zip HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /cpanel.zip HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /webapps.zip HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /wp-admin.zip HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /public.zip HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /web.zip HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28741.contaboserver.net - - [16/Jun/2025:14:33:40 -0600] "GET /wordpress-2024.zip HTTP/1.1" 301 256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 vmi378305.contaboserver.net - - [15/Jun/2025:20:27:10 -0600] "GET /wp-login.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" newtonsecurityinc.com 66.147.240.157 vmi2477448.contaboserver.net - - [15/Jun/2025:14:53:05 -0600] "GET / HTTP/1.1" 301 238 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" newtonsecurityinc.com 66.147.240.157 vmi2626284.contaboserver.net - - [09/Jun/2025:22:35:44 -0600] "GET /api/.env HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Linux; Android 9; ONEPLUS A5010) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36" newtonsecurityinc.com 66.147.240.157 vmi2636127.contaboserver.net - - [09/Jun/2025:08:30:14 -0600] "GET /api/.env HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.90 Safari/537.36" newtonsecurityinc.com 66.147.240.157 vmi2626284.contaboserver.net - - [08/Jun/2025:23:05:55 -0600] "GET /core/.env HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.90 Safari/537.36" newtonsecurityinc.com 66.147.240.157 vmi2636127.contaboserver.net - - [08/Jun/2025:06:46:05 -0600] "GET /core/.env HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Linux; U; Android 9; en-US; RMX1851 Build/PKQ1.190101.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.12.8.1206 Mobile Safari/537.36" newtonsecurityinc.com 66.147.240.157 vmi2626284.contaboserver.net - - [07/Jun/2025:23:58:30 -0600] "GET /.env HTTP/1.1" 301 242 "-" "Mozilla/5.0 (BeOS; U; BeOS BePC; en-US; rv:1.9a1) Gecko/20060702 SeaMonkey/1.5a" newtonsecurityinc.com 66.147.240.157 m28740.contaboserver.net - - [07/Jun/2025:21:01:11 -0600] "GET /.git/config HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157 m28740.contaboserver.net - - [07/Jun/2025:14:08:24 -0600] "GET / HTTP/1.1" 406 226 "-" "Go-http-client/1.1" newtonsecurityinc.com 66.147.240.157 vmi2636127.contaboserver.net - - [07/Jun/2025:06:04:10 -0600] "GET /.env HTTP/1.1" 301 242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/602.2.14 (KHTML, like Gecko) Version/10.0.1 Safari/602.2.14" newtonsecurityinc.com 66.147.240.157 vmd152326.contaboserver.net - - [31/May/2025:11:16:01 -0600] "GET / HTTP/1.1" 301 238 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" newtonsecurityinc.com 66.147.240.157 m12031.contaboserver.net - - [28/May/2025:20:44:04 -0600] "GET /style.php HTTP/1.1" 301 251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m12031.contaboserver.net - - [28/May/2025:20:43:49 -0600] "GET /wp-content/themes/hello_dolly_v2.php HTTP/1.1" 301 278 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 vmi2542390.contaboserver.net - - [16/May/2025:20:57:09 -0600] "GET //www.google.com/recaptcha/api.js HTTP/1.1" 301 269 "-" "Mozilla/5.0 (Linux; Android 9; VKY-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" newtonsecurityinc.com 66.147.240.157 vmi2542390.contaboserver.net - - [16/May/2025:20:57:09 -0600] "GET /theme/plugins.js HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" newtonsecurityinc.com 66.147.240.157 vmi2542390.contaboserver.net - - [16/May/2025:20:57:09 -0600] "GET //cdn2.editmysite.com/js/site/main-customer-accounts-site.js HTTP/1.1" 301 296 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" newtonsecurityinc.com 66.147.240.157 vmi2542390.contaboserver.net - - [16/May/2025:20:57:09 -0600] "GET /theme/custom.js HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.84 Safari/537.36" newtonsecurityinc.com 66.147.240.157 vmi2542390.contaboserver.net - - [16/May/2025:20:57:09 -0600] "GET //ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1" 301 294 "-" "Mozilla/5.0 (Linux; Android 6.0.1; SM-N910S) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.36" newtonsecurityinc.com 66.147.240.157 vmi2579524.contaboserver.net - - [13/May/2025:10:27:10 -0600] "GET /.vscode/sftp.json HTTP/1.1" 301 255 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" newtonsecurityinc.com 66.147.240.157 vmi2579524.contaboserver.net - - [13/May/2025:10:27:09 -0600] "GET /sftp-config.json HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" newtonsecurityinc.com 66.147.240.157 m10240.contaboserver.net - - [12/May/2025:21:19:22 -0600] "GET /blog/wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 291 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m10240.contaboserver.net - - [12/May/2025:15:13:18 -0600] "GET /wp-content/plugins/order-delivery-date/readme.txt HTTP/1.1" 406 226 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" newtonsecurityinc.com 66.147.240.157 m10240.contaboserver.net - - [12/May/2025:15:13:11 -0600] "GET /style.php HTTP/1.1" 301 247 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" newtonsecurityinc.com 66.147.240.157 m10240.contaboserver.net - - [12/May/2025:15:12:57 -0600] "GET /wp-content/themes/hello_dolly_v2.php HTTP/1.1" 301 274 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" newtonsecurityinc.com 66.147.240.157 m11366.contaboserver.net - - [12/May/2025:10:04:25 -0600] "GET /wp-content/plugins/order-delivery-date/readme.txt HTTP/1.1" 406 226 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m11366.contaboserver.net - - [12/May/2025:10:04:20 -0600] "GET /style.php HTTP/1.1" 301 251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m11366.contaboserver.net - - [12/May/2025:10:04:10 -0600] "GET /wp-content/themes/hello_dolly_v2.php HTTP/1.1" 301 278 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m10420.contaboserver.net - - [11/May/2025:19:33:50 -0600] "GET /wp-content/plugins/order-delivery-date/readme.txt HTTP/1.1" 406 226 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m12593.contaboserver.net - - [11/May/2025:18:19:54 -0600] "GET /wp-content/themes/include.php HTTP/1.1" 301 271 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m12593.contaboserver.net - - [11/May/2025:18:19:43 -0600] "GET /wp-content/themes/hello_dolly_v2.php HTTP/1.1" 301 278 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m12593.contaboserver.net - - [11/May/2025:18:19:40 -0600] "GET /wp-content/plugins/HelloDollyV2/hello_dolly_v2.php HTTP/1.1" 301 292 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 vmi2525938.contaboserver.net - - [11/May/2025:14:10:59 -0600] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 286 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 vmi2525938.contaboserver.net - - [11/May/2025:14:10:30 -0600] "GET /wp-content/plugins/HelloDollyV2/hello_dolly_v2.php HTTP/1.1" 301 292 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m12593.contaboserver.net - - [10/May/2025:02:15:35 -0600] "GET /wp-content/themes/include.php HTTP/1.1" 301 267 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" newtonsecurityinc.com 66.147.240.157 m12593.contaboserver.net - - [10/May/2025:02:15:17 -0600] "GET /wp-content/plugins/HelloDollyV2/hello_dolly_v2.php HTTP/1.1" 301 288 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" newtonsecurityinc.com 66.147.240.157 m4831.contaboserver.net - - [06/May/2025:15:09:36 -0600] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 286 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 m4831.contaboserver.net - - [06/May/2025:15:09:23 -0600] "GET /wp-content/plugins/HelloDollyV2/hello_dolly_v2.php HTTP/1.1" 301 292 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" www.newtonsecurityinc.com 66.147.240.157 vmi2583350.contaboserver.net - - [05/May/2025:08:46:57 -0600] "GET /adminer.php HTTP/1.1" 301 249 "-" "curl/7.68.0" newtonsecurityinc.com 66.147.240.157 vmi2583350.contaboserver.net - - [05/May/2025:08:46:56 -0600] "HEAD /adminer.php HTTP/1.1" 301 - "-" "curl/7.68.0" newtonsecurityinc.com 66.147.240.157 vmi2583350.contaboserver.net - - [02/May/2025:16:48:53 -0600] "GET /adminer.php HTTP/1.1" 301 253 "-" "curl/7.68.0" www.newtonsecurityinc.com 66.147.240.157 vmi2583350.contaboserver.net - - [02/May/2025:16:48:52 -0600] "HEAD /adminer.php HTTP/1.1" 301 - "-" "curl/7.68.0" www.newtonsecurityinc.com 66.147.240.157 vmi2583350.contaboserver.net - - [02/May/2025:10:25:25 -0600] "GET /adminer.php HTTP/1.1" 301 253 "-" "curl/7.68.0" www.newtonsecurityinc.com 66.147.240.157 vmi2583350.contaboserver.net - - [02/May/2025:10:25:23 -0600] "HEAD /adminer.php HTTP/1.1" 301 - "-" "curl/7.68.0" www.newtonsecurityinc.com 66.147.240.157 m10420.contaboserver.net - - [02/May/2025:02:13:35 -0600] "GET /wp-content/themes/include.php HTTP/1.1" 301 267 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" newtonsecurityinc.com 66.147.240.157 m10420.contaboserver.net - - [02/May/2025:02:13:02 -0600] "GET /wp-content/plugins/HelloDollyV2/hello_dolly_v2.php HTTP/1.1" 301 288 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" newtonsecurityinc.com 66.147.240.157/html.zip
HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" newtonsecurityinc.com 66.147.240.157