SELECT sourceip, destinationip, destinationport, QIDNAME(qid) AS event, LOGSOURCENAME(logsourceid) AS log_source, "URL" FROM events WHERE ("URL" ILIKE '%/wp-content/plugins/sniplets/modules/syntax_highlight.php%' AND "URL" ILIKE '%../%') LAST 7 DAYS