@selea it's well-known that CT logs are used to attack freshly uploaded WordPress installers in seconds, so all that noise makes sense.