Hallo Christian
Was der bei dir tut, kann man aus dem User-Agent nicht schliessen.
Bei mir fragt unter anderem diese Ressourcen ab: /wp-admin /well-known/ /uploads /images /files /wso.php, /ee.php, /wp-content, /wp-info, /sett.php, /customize.php, /wp-l0gin.php, /media-admin.php, /wikindex.php, /wp-2020.php, /fox.php, /default.php, /wp-includes, /makhdmax.php, /modules, /mad.php, /clen.php, /marijuana.php, /cp.php, /ws.php, /style.php, /text.php, /customize.php, /sett.php, /wso112233.php, /shell20211028.php, /wp-blog, /autoload_classmap.php, /radio.php, /payout.php, sites/default/files/"
Gruß Ingo